Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913F2BD/47844200389611EF9EDE8136C4F9AE02/470E849A389E11EF83D66176C4F9AE02.roa
File:                     470E849A389E11EF83D66176C4F9AE02.roa (raw, json)
Hash identifier:          MkXldkwwGPBMNO0p6m3CW8J6w5UO09g/B7IP6QByn5c=
Subject key identifier:   FD:F5:2E:62:0B:CB:56:AB:4B:6C:B1:11:67:D3:47:C6:5E:27:8A:3B
Certificate issuer:       /CN=A913F2BD/serialNumber=97D04159FBB37EA67462B896976C1140C959E691
Certificate serial:       0140
Authority key identifier: 97:D0:41:59:FB:B3:7E:A6:74:62:B8:96:97:6C:11:40:C9:59:E6:91
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9BBWfuzfqZ0YriWl2wRQMlZ5pE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913F2BD/47844200389611EF9EDE8136C4F9AE02/470E849A389E11EF83D66176C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 15:21:55 +0000
ROA not before:           Mon 07 Jul 2025 06:13:37 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     153048
IP address blocks:        2001:df4:c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913F2BD/47844200389611EF9EDE8136C4F9AE02/l9BBWfuzfqZ0YriWl2wRQMlZ5pE.crl
                          rsync://rpki.apnic.net/member_repository/A913F2BD/47844200389611EF9EDE8136C4F9AE02/l9BBWfuzfqZ0YriWl2wRQMlZ5pE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9BBWfuzfqZ0YriWl2wRQMlZ5pE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 15:21:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 320 (0x140)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913F2BD, serialNumber=97D04159FBB37EA67462B896976C1140C959E691
        Validity
            Not Before: Jul  7 06:13:37 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a5ab13-4f0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:f5:96:45:c7:e8:42:94:00:f9:6f:04:3d:ce:
                    c0:18:f9:bf:a2:7d:4a:33:96:28:98:99:69:a1:2b:
                    c4:c2:82:94:17:44:8e:0c:51:43:cd:94:85:c1:4d:
                    79:35:03:38:f6:16:b2:24:0b:e9:07:86:12:ed:10:
                    42:62:95:5a:b7:6d:48:ad:86:f0:e0:30:0c:96:ae:
                    df:fa:b8:11:f4:72:f7:ae:2e:07:20:24:a1:60:b4:
                    9d:54:14:e6:d2:97:58:d7:4b:9a:06:27:d0:ca:c2:
                    b6:41:69:ff:95:e0:f7:38:94:a2:28:30:1b:37:2a:
                    b7:28:57:26:e5:7c:c1:18:dd:79:11:bb:2d:16:fb:
                    9d:b6:f5:25:46:b6:e3:42:20:56:0e:96:27:ad:1c:
                    22:7b:c4:81:9f:9c:19:8f:6f:15:d0:8c:0a:65:6c:
                    13:79:f0:05:cc:5b:12:28:9d:7e:90:8a:3c:c8:5a:
                    23:30:29:fc:7d:3f:92:ce:49:c7:03:e5:fd:9b:6f:
                    ed:cb:50:df:42:4c:c0:d5:f3:ad:d2:77:61:77:e2:
                    ba:7c:6d:ae:33:d7:20:b6:fb:40:bc:d7:b6:98:60:
                    0a:2a:ea:93:57:93:3a:da:c9:92:7b:51:91:55:af:
                    69:53:dd:86:f3:30:66:d2:3e:d9:f0:44:a7:f7:11:
                    3e:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:F5:2E:62:0B:CB:56:AB:4B:6C:B1:11:67:D3:47:C6:5E:27:8A:3B
            X509v3 Authority Key Identifier:
                keyid:97:D0:41:59:FB:B3:7E:A6:74:62:B8:96:97:6C:11:40:C9:59:E6:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913F2BD/47844200389611EF9EDE8136C4F9AE02/l9BBWfuzfqZ0YriWl2wRQMlZ5pE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9BBWfuzfqZ0YriWl2wRQMlZ5pE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F2BD/47844200389611EF9EDE8136C4F9AE02/470E849A389E11EF83D66176C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df4:c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         7e:b0:06:8b:40:45:cf:5b:e2:dc:3c:f1:c4:02:2e:9e:95:ca:
         b6:17:89:2d:74:2f:bc:8f:52:f3:d9:67:1f:67:91:21:3c:26:
         67:d0:22:04:77:30:bf:be:5a:81:60:46:b7:b6:76:e2:d8:06:
         33:ff:ba:85:9b:ce:a4:ab:87:1d:6a:8b:bc:2c:36:eb:4a:51:
         c3:04:7a:b7:00:14:ec:9e:6f:3f:fb:c4:4b:73:58:93:e9:0c:
         7d:b4:1d:b9:23:d3:d3:a9:b3:cb:af:68:e3:2f:b9:a4:2a:17:
         c5:e6:ed:6d:74:9c:31:bf:d8:fa:4f:7f:af:6f:45:e9:2a:09:
         80:b5:00:93:7c:6f:83:82:fd:93:e3:d4:4c:fc:8b:35:cd:60:
         ea:07:4e:11:86:e4:21:d9:66:03:81:db:38:96:82:f1:b9:26:
         26:49:bf:d3:9e:3b:93:64:67:39:31:53:b1:d3:e6:07:11:3c:
         90:0a:46:ee:9c:e8:ee:99:6e:fd:31:ed:5b:2d:ce:4c:cc:50:
         f3:05:3e:03:88:ec:3a:e9:2e:58:5a:8d:ef:8a:77:61:3c:63:
         93:96:c6:da:18:fe:55:7d:a7:4d:48:aa:9d:0e:03:e3:d8:94:
         78:db:03:db:b4:dd:02:99:ec:ff:60:99:6c:a3:70:07:90:b0:
         37:01:0a:04
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgICAUAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0YyQkQxMTAvBgNVBAUTKDk3RDA0MTU5RkJCMzdFQTY3NDYyQjg5Njk3NkMxMTQw
Qzk1OUU2OTEwHhcNMjUwNzA3MDYxMzM3WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE1YWIxMy00ZjBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwvWWRcfoQpQA+W8EPc7AGPm/on1KM5YomJlpoSvEwoKUF0SODFFDzZSFwU15
NQM49hayJAvpB4YS7RBCYpVat21IrYbw4DAMlq7f+rgR9HL3ri4HICShYLSdVBTm
0pdY10uaBifQysK2QWn/leD3OJSiKDAbNyq3KFcm5XzBGN15EbstFvudtvUlRrbj
QiBWDpYnrRwie8SBn5wZj28V0IwKZWwTefAFzFsSKJ1+kIo8yFojMCn8fT+SzknH
A+X9m2/ty1DfQkzA1fOt0ndhd+K6fG2uM9cgtvtAvNe2mGAKKuqTV5M62smSe1GR
Va9pU92G8zBm0j7Z8ESn9xE+GwIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFP31LmIL
y1arS2yxEWfTR8ZeJ4o7MB8GA1UdIwQYMBaAFJfQQVn7s36mdGK4lpdsEUDJWeaR
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjJCRC80Nzg0NDIwMDM4
OTYxMUVGOUVERTgxMzZDNEY5QUUwMi9sOUJCV2Z1emZxWjBZcmlXbDJ3UlFNbFo1
cEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2w5QkJXZnV6ZnFaMFlyaVdsMndSUU1sWjVwRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
M0YyQkQvNDc4NDQyMDAzODk2MTFFRjlFREU4MTM2QzRGOUFFMDIvNDcwRTg0OUEz
ODlFMTFFRjgzRDY2MTc2QzRGOUFFMDIucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP
BAIAAjAJAwcAIAEN9ADAMA0GCSqGSIb3DQEBCwUAA4IBAQB+sAaLQEXPW+LcPPHE
Ai6elcq2F4ktdC+8j1Lz2WcfZ5EhPCZn0CIEdzC/vlqBYEa3tnbi2AYz/7qFm86k
q4cdaou8LDbrSlHDBHq3ABTsnm8/+8RLc1iT6Qx9tB25I9PTqbPLr2jjL7mkKhfF
5u1tdJwxv9j6T3+vb0XpKgmAtQCTfG+Dgv2T49RM/Is1zWDqB04RhuQh2WYDgds4
loLxuSYmSb/TnjuTZGc5MVOx0+YHETyQCkbunOjumW79Me1bLc5MzFDzBT4DiOw6
6S5YWo3vindhPGOTlsbaGP5VfadNSKqdDgPj2JR42wPbtN0Cmez/YJlso3AHkLA3
AQoE
-----END CERTIFICATE-----
Generated at Mon Mar 2 23:53:45 2026 by rpki-client